CVE-2007-4427
Severity Score
3.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unspecified vulnerability in the login page redirection logic in the Cache' Server Page (CSP) implementation in InterSystems Cache' 2007.1.0.369.0 and 2007.1.1.420.0 allows remote authenticated users to modify data on a server, related to encoding of certain parameter values by this redirection logic, aka MAK2116.
Vulnerabilidad no especificada en la página de redirección de login en la implementación Cache' Server Page (CSP) en InterSystems Cache' 2007.1.0.369.0 y 2007.1.1.420.0 permite a usuarios validados remotos modificar datos sobre un servidor, relacionado con la codificación de ciertos valores de parámetros a través de esta redirección lógica, también conocida como MAK2116.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2007-08-20 CVE Reserved
- 2007-08-20 CVE Published
- 2024-06-23 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://osvdb.org/40178 | Vdb Entry | |
| http://secunia.com/advisories/26541 | Third Party Advisory | |
| http://www.intersystems.com/support/cflash/2007announce.html | X_refsource_confirm |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://groups.google.com/group/intersystems-public-cache/browse_thread/thread/57d7c80dde26fda3/7845e246da5b095b | 2008-11-15 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Intersystems Search vendor "Intersystems" | Cache Database Search vendor "Intersystems" for product "Cache Database" | 2007.1.0.369.0 Search vendor "Intersystems" for product "Cache Database" and version "2007.1.0.369.0" | - |
Affected
| ||||||
| Intersystems Search vendor "Intersystems" | Cache Database Search vendor "Intersystems" for product "Cache Database" | 2007.1.1.420.0 Search vendor "Intersystems" for product "Cache Database" and version "2007.1.1.420.0" | - |
Affected
| ||||||